Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32322d3232203d3e20323634353530.roa (raw, json)
Hash identifier:          V7wl+CmirKRHNBuGi0YAmpaa00envLU8R838Iqs7co0=
Subject key identifier:   78:A0:E5:3C:E4:7D:76:FB:89:6F:C3:44:37:40:DB:3F:44:05:87:8A
Certificate issuer:       /CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
Certificate serial:       7AC130304BA780D6381EE6D8C9F1E21DEAC4AC14
Authority key identifier: 7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa
Signing time:             Wed 27 Mar 2024 21:21:16 +0000
ROA not before:           Wed 27 Mar 2024 21:16:16 +0000
ROA not after:            Wed 26 Mar 2025 21:21:16 +0000
asID:                     264550
IP address blocks:        138.0.136.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:c1:30:30:4b:a7:80:d6:38:1e:e6:d8:c9:f1:e2:1d:ea:c4:ac:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7
        Validity
            Not Before: Mar 27 21:16:16 2024 GMT
            Not After : Mar 26 21:21:16 2025 GMT
        Subject: CN=78A0E53CE47D76FB896FC3443740DB3F4405878A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:9a:fb:a7:d2:ce:4c:71:1d:96:e3:fb:55:
                    62:a7:4a:9d:2e:5b:85:b9:3a:7f:fd:75:ac:65:72:
                    16:68:64:47:e4:7b:42:a2:fd:4f:09:cc:ca:86:2d:
                    a9:59:86:fe:f1:af:4a:c7:73:bf:77:0b:dd:66:b2:
                    13:7a:f3:ea:8f:8a:25:7b:01:1a:88:4f:d8:18:f8:
                    10:cb:9c:47:d0:7e:63:d6:49:1e:fe:a2:ff:cf:41:
                    92:af:97:36:0f:48:f8:08:0b:db:d4:29:4c:c7:a6:
                    fd:ff:e7:b7:83:24:a7:6a:e5:ed:ef:a1:f3:b0:ca:
                    2b:7f:5a:3c:16:72:01:2d:ad:ed:39:6e:36:7a:c9:
                    3e:8b:9a:64:5e:9e:66:4f:e0:04:bc:68:eb:3c:cf:
                    80:b8:15:d8:50:92:56:f4:ce:4e:73:89:1f:f9:90:
                    9a:56:2a:42:59:0d:b0:29:ac:c2:09:c4:ef:af:38:
                    75:e4:70:1a:36:ca:2e:4f:30:e4:bd:21:7d:53:1a:
                    e0:ae:bf:f9:6a:8c:bc:12:ab:f9:42:5d:b7:3e:a1:
                    5d:07:72:ec:9f:5d:a5:58:76:7d:6a:7b:1c:0a:33:
                    66:c4:ba:62:9b:b2:a3:6c:17:a9:51:65:39:c5:c5:
                    5c:02:ec:98:ff:a9:9a:8c:11:f4:25:79:dd:cc:0c:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A0:E5:3C:E4:7D:76:FB:89:6F:C3:44:37:40:DB:3F:44:05:87:8A
            X509v3 Authority Key Identifier:
                keyid:7C:88:D2:DE:D2:59:AE:38:4E:64:BE:48:D0:B1:C3:A2:62:7C:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C88D2DED259AE384E64BE48D0B1C3A2627CC1A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32322d3232203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:df:65:ee:4a:37:26:23:c2:c9:93:f1:53:a2:d4:94:8f:50:
         ef:24:34:90:59:b2:20:4d:2b:ba:f0:fa:4d:a7:7e:eb:fb:28:
         89:fc:2a:9a:7c:8f:d8:57:16:e4:ce:ed:17:ce:8f:9e:a4:52:
         0e:3d:ce:92:14:5f:4e:17:23:28:4e:27:82:31:52:00:df:b0:
         5c:e5:0e:88:67:d1:4e:28:c5:47:8c:a4:c1:15:d6:e0:b7:6e:
         09:82:13:e9:0c:de:8b:61:82:f0:80:6c:05:b6:78:40:d4:17:
         8f:fa:ce:90:2d:5c:84:91:47:ad:5c:66:3c:d8:b0:86:68:dc:
         7b:4d:7b:86:e0:43:f4:9f:4f:94:22:a9:56:44:73:dc:da:b6:
         bd:1b:a6:57:f1:33:7c:2f:fd:ad:cc:03:6e:f1:0c:8d:50:e8:
         89:0e:31:cc:e5:6e:28:4a:f7:5b:67:a6:e3:61:de:18:be:89:
         9d:cc:e2:1f:6d:a7:15:1e:0b:3e:3f:43:55:6e:b6:b1:00:04:
         39:94:16:a3:ba:2b:7d:57:ad:be:a7:45:bd:8c:6f:2b:98:d5:
         44:bb:cf:c8:71:e5:11:17:0c:3c:c5:3e:d1:1f:32:7b:c7:ea:
         dc:9e:76:c6:71:c2:07:0f:21:de:56:50:68:9b:8d:9e:16:43:
         aa:fb:6a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org